---
title: 'Software Engineer, AI Product Security at Notion'
canonical: 'https://feeny.ai/job/software-engineer-ai-product-security-notion-san-francisco-mf241n82d58z'
type: 'job'
last_seen: '2026-09-09'
---

# Software Engineer, AI Product Security at Notion

- **Company:** [Notion](https://feeny.ai/companies/notion)
- **Location:** San Francisco, CA
- **Compensation:** $290k–$350k
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-06-09
- **Last confirmed live:** 2026-09-09
- **Apply:** https://jobs.ashbyhq.com/notion/def3f337-5593-491c-b34d-e0b53f2a5cac/application

**Skills:** Identity and Authentication, Authorization, SAML, OIDC, OAuth, Passkeys, CSP, AI/LLM Security, Prompt Injection Protection, Tool/Data Provenance, Policy Enforcement, SpiceDB, Macaroons

> Notion is hiring an experienced Security Engineer to own cross-cutting security programs at the intersection of product, infrastructure, and AI. The role involves modernizing authentication, building AI safety guardrails, and advancing the authorization platform while mentoring teams and reducing security risks.

## Job description

## WHO WE ARE

Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion.

Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work.

## ABOUT THE ROLE:

Notion is looking for an experienced engineer who has designed and built secure software systems to help define the security foundations for our AI products. You’ll work with product and engineering teams on agent runtimes, tool permissions, retrieval, content writes, observability, and abuse-resistant design. You’ll turn product risks into clear architecture, reusable guardrails, automated tests, and production systems that help teams ship new features safely.

This role is based in San Francisco. We work from our offices on Mondays, Tuesdays and Thursdays (our Anchor Days) because we do our best thinking and building together in person. We’re looking for someone who’s excited to work alongside the team during those days.

## WHAT YOU'LL ACHIEVE:

- Define and build security architecture for product surfaces that operate across customer workspace content, including tool execution, content writes, retrieval, permission checks, provenance, and auditability.
- Make the secure path the easy path for product teams by shipping reusable libraries, review patterns, test fixtures, and guardrails that prevent classes of vulnerabilities.
- Build automated red-team and regression testing for risks such as prompt injection, indirect instruction following, data exfiltration, tool misuse, cross-tenant leakage, and unsafe workspace mutations.
- Translate threat models for new product surfaces into concrete engineering requirements, production checks, and launch criteria.
- Use production signals, incident learnings, and targeted experiments to harden Notion over time, then feed those learnings back into architecture and developer workflows.
- Help define the security bar for how engineers use coding agents, MCP-enabled tools, hooks, and internal automation without introducing new risk.

## SKILLS YOU'LL NEED TO BRING:

- Secure software engineering craft: You have 8-10+ years of experience designing, building, or securing complex software systems, and you are comfortable working in production code with product and platform engineers.
- Security architecture judgment: You can look at a complex system and reason about where the permissions, data flow, or trust boundaries are likely to get weird, and help re-design it to make them better.
- Security product strategy: You can turn a complex security risk you see into a product design or architecture that can be built.
- Builder mindset: You’d rather leave behind a useful tool, test, library, or pattern than a task or project for someone else to pick up later.

## NICE TO HAVES:

- Experience building or securing products with tool use, retrieval, workflow automation, content writes, or complex permission boundaries.
- Hands-on experience with prompt-injection testing, red teaming, model behavior evaluation, or abuse-resistant application design.
- Experience with enterprise SaaS security models: permissions, sharing, audit logs, data residency, encryption, compliance, or customer-facing trust guarantees.
- Experience building developer tooling, CI checks, coding-agent workflows, MCP integrations, or internal frameworks that shape how engineers build software.
- Public security research, vulnerability writeups, conference talks, or open-source work related to product security or secure developer infrastructure.

Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco, the estimated base salary range for this role is $270,000 - $340,000 per year.

By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550. https://dev.notion.so/a3ce416456924276a59de91bca740028?pvs=21

#LI-Onsite

## A NOTE ON AI

You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on.

## EQUAL OPPORTUNITY & ACCOMMODATIONS

We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know.

Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.

## About Notion

## Company Overview
- **One-liner**: Notion is an all-in-one AI workspace that combines documents, databases, wikis, and project management into a single customizable platform.
- **Entity Type**: Private (late-stage; last valuation $11B via secondary tender in January 2026)
- **Headquarters**: San Francisco, California, USA
- **Founded**: 2013
- **Founders**: Ivan Zhao (CEO), Simon Last (CTO)

## Core Business
- **Primary industry**: Productivity software / AI workspace
- **Target customers**: B2B and B2C – freelancers, small teams, mid-market, and enterprise organizations
- **Mission**: “Make it possible for everyone to shape the tools that shape their lives.”

## Products & Services
- **Notion (Core Workspace)**: A flexible SaaS platform that replaces separate tools for notes, docs, knowledge bases, project tracking, and databases. Highly customizable with templates and integrations.
- **Notion AI**: Integrated AI assistant for writing, summarizing, brainstorming, and automating workflows within the workspace.
- **Notion API & Integrations**: Allows developers to build custom automations and connect Notion with other tools (Slack, Google Drive, Jira, etc.).
- **Notion Mail (in development)**: An AI-powered email client that rethinks inbox management, currently in beta.

## Market Standing
- **Valuation**: $11 billion (set in a January 2026 secondary tender offer)
- **Key Metric**: Total funding approximately $347M (Series D in 2021 at $10B valuation); annual revenue not publicly disclosed
- **Notable Investors/Partners**: Index Ventures, Sequoia Capital, Coatue Management, Tiger Global, CRV (past rounds); strategic partnerships with companies like Slack and Google.
- **Growth Signals**: Headcount grew from ~800 (2024) to ~1,000 (2026); 148 open roles as of April 2026; global expansion with offices in San Francisco, New York, Dublin, Tokyo, Seoul, Hyderabad, Sydney, and more; heavy investment in AI features and enterprise sales.

## Competitive Advantages
- **All-in-one flexibility**: Replaces multiple point solutions (Confluence, Evernote, Trello, etc.) with a single, highly customizable workspace.
- **Strong brand loyalty**: High NPS and 4.3/5 Glassdoor rating; 89% of employees would recommend working there.
- **AI-native integration**: Notion AI is deeply embedded into the core product, not a bolt-on, giving it an edge over legacy tools.
- **Engineering-driven culture**: CEO Ivan Zhao is deeply involved in product details, fostering a craft-obsessed engineering culture.

## Strategic Focus
- **AI leadership**: Expanding AI capabilities (AI Capture, AI Workflows, Agentic Search) to make Notion the central hub for both human and AI agent collaboration.
- **Enterprise adoption**: Building out sales, customer success, and security features to win larger accounts.
- **Global hiring**: Opening new offices in APAC and Europe to support international growth and talent acquisition.
- **Product expansion**: Developing new surfaces like Notion Mail and deepening integrations to increase stickiness.

## Why Work Here
- **Culture**: Engineering-driven, transparent, and kind. Values include “Customer in every room,” “Own the outcome,” “Why not today?,” and “Direct and kind.”
- **Work policy**: Hybrid – required in-office Monday, Tuesday, Thursday; remote flexibility the other two days. Offices in major global cities.
- **Compensation**: Competitive – median engineer total compensation ~$330K, top-end ~$735K (2026 data). Includes equity, bonuses, and benefits.
- **Benefits**: Fully covered medical/dental/vision, flexible PTO, paid parental leave, mental health services (therapy, coaching), family-forming/fertility support, monthly lifestyle stipend, learning & development funds, commuter benefits, retirement plan with match, and more.
- **Growth**: 148 open roles across engineering, product, design, sales, customer experience, and more – strong signal of active scaling.
- **Diversity & Inclusion**: Explicit DEI programs, gender affirmation funds, and a commitment to building a diverse team.

## Sources
1. [Notion Careers Page](https://www.notion.com/careers)
2. [Notion Open Positions (Ashby)](https://jobs.ashbyhq.com/notion)
3. [JobsByCulture – Working at Notion in 2026](https://jobsbyculture.com/blog/working-at-notion-2026)
4. [Built In – Notion Company Profile](https://builtin.com/company/notion)
5. [Notion Homepage](https://www.notion.com/)

## Other roles at Notion

- [Security Engineer, Corporate Security](https://feeny.ai/job/security-engineer-corporate-security-notion-dublin-fcyaxkp8e0s1) — Dublin, Ireland
- [Field Marketing](https://feeny.ai/job/field-marketing-notion-san-francisco-6dazaxa6xxch) — San Francisco, CA
- [Brand Designer, Creative Studio](https://feeny.ai/job/brand-designer-creative-studio-notion-new-york-903vvd4jafnf) — New York, NY
- [Outcomes Architect Manager, Tokyo](https://feeny.ai/job/outcomes-architect-manager-tokyo-notion-tokyo-tz8a7v5sb2zg) — Tokyo, Japan
- [Business Operations & Strategy Lead](https://feeny.ai/job/business-operations-strategy-lead-notion-san-francisco-rcnxbppzqsn2) — San Francisco, CA
- [Chief of Staff, Sales](https://feeny.ai/job/chief-of-staff-sales-notion-san-francisco-55fdqbzx0kyf) — San Francisco, CA
- [Manager, Enablement Programs](https://feeny.ai/job/manager-enablement-programs-notion-san-francisco-qf6ye3kdjvb6) — San Francisco, CA
- [Commercial Counsel](https://feeny.ai/job/commercial-counsel-notion-san-francisco-rknqxbd5y4ez) — San Francisco, CA
- [Mid-Market Outcomes Architect](https://feeny.ai/job/mid-market-outcomes-architect-notion-tokyo-2aj6f5ae93jz) — Tokyo, Japan
- [GTM Compensation Lead, Commercial Operations](https://feeny.ai/job/gtm-compensation-lead-commercial-operations-notion-san-francisco-n888zzp7jtd6) — San Francisco, CA